Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/MCVWRVzWWh23JR1k0ZFtIhb-O8o.roa
File: MCVWRVzWWh23JR1k0ZFtIhb-O8o.roa (raw, json)
Hash identifier: Uz7dL2QD3U+BgQc3xRHL1sRHyDeIXjwPHJszDd2zBx4=
Subject key identifier: 30:25:56:45:5C:D6:5A:1D:B7:25:1D:64:D1:91:6D:22:16:FE:3B:CA
Certificate issuer: /CN=38897cfcbf81565a808d4b67b98df558005800da
Certificate serial: 019F23689995C71E9D236CC2A1090A49BA68
Authority key identifier: 38:89:7C:FC:BF:81:56:5A:80:8D:4B:67:B9:8D:F5:58:00:58:00:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIl8_L-BVlqAjUtnuY31WABYANo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/MCVWRVzWWh23JR1k0ZFtIhb-O8o.roa
Signing time: Thu 02 Jul 2026 15:18:05 +0000
ROA not before: Thu 02 Jul 2026 15:18:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56714
IP address blocks: 91.227.24.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/OIl8_L-BVlqAjUtnuY31WABYANo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/OIl8_L-BVlqAjUtnuY31WABYANo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OIl8_L-BVlqAjUtnuY31WABYANo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:99:95:c7:1e:9d:23:6c:c2:a1:09:0a:49:ba:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38897cfcbf81565a808d4b67b98df558005800da
Validity
Not Before: Jul 2 15:18:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=302556455cd65a1db7251d64d1916d2216fe3bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d0:51:dc:3a:99:24:b8:26:56:f0:09:29:52:
60:20:d9:01:97:9b:d9:81:15:24:38:a3:ae:1c:1e:
34:5e:c9:89:c1:70:11:9d:42:e3:23:fa:41:e8:e5:
b8:94:ee:ad:a7:10:2f:cf:54:8e:91:8a:9b:d8:14:
03:57:c1:45:ea:47:f0:d1:7a:83:ec:5d:9b:a6:bb:
b9:0d:12:af:b9:22:b8:53:8e:5a:42:6e:09:45:8e:
2b:4f:95:18:25:62:2f:a7:6f:25:84:90:99:fe:27:
bd:73:df:50:c2:da:60:b8:f4:b1:23:57:c7:a8:19:
7c:f4:d9:31:1d:96:d4:dd:e3:9d:81:4f:ca:0c:c7:
ba:a2:72:e7:29:f6:cb:c8:31:03:89:ee:8d:fc:a5:
a7:e2:21:97:dc:6d:2e:21:86:8e:18:d0:31:a6:4f:
26:31:44:ad:9a:3c:83:1c:73:7c:35:52:90:2d:3a:
35:02:79:af:2c:1e:5b:d8:cb:b3:0e:c9:a5:33:f8:
10:56:a8:96:a2:d9:4b:ce:53:b1:07:e4:49:dd:7c:
64:b1:52:23:fe:86:b1:ee:55:d0:4f:af:8e:13:df:
67:d1:87:0d:0a:7d:83:78:2b:e3:5a:8f:63:10:01:
53:97:14:a3:5f:36:65:0a:a7:66:2b:72:77:36:f4:
da:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:25:56:45:5C:D6:5A:1D:B7:25:1D:64:D1:91:6D:22:16:FE:3B:CA
X509v3 Authority Key Identifier:
keyid:38:89:7C:FC:BF:81:56:5A:80:8D:4B:67:B9:8D:F5:58:00:58:00:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIl8_L-BVlqAjUtnuY31WABYANo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/MCVWRVzWWh23JR1k0ZFtIhb-O8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/OIl8_L-BVlqAjUtnuY31WABYANo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.24.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:d5:6c:73:f0:a0:83:da:ca:bf:c7:83:2f:e6:84:1d:b9:0c:
81:10:e7:4b:65:95:3e:85:33:10:30:72:f3:8e:3a:b0:08:71:
7a:07:af:4b:59:67:ad:88:c1:5c:a1:f5:79:6b:df:39:87:1e:
37:cf:56:2e:95:71:2f:22:0b:1e:29:9d:c5:7b:f0:d5:c9:cb:
ad:08:6a:7e:88:93:eb:36:92:6c:1d:0e:b9:e9:25:b3:01:7c:
4a:2c:d1:da:3a:b0:fc:4c:33:98:10:da:bf:1e:9c:ad:5c:d8:
20:f8:53:6e:bf:1c:2b:15:ad:cb:37:94:a0:88:57:e6:a9:ed:
fa:90:d5:11:f1:c4:2a:ae:5f:65:c5:cf:8d:b8:8c:19:d9:94:
66:83:73:48:87:f9:2d:78:f1:d3:5a:d1:c2:07:73:28:ab:68:
74:4a:42:15:6b:a7:c3:93:66:5f:8e:db:2e:c7:5f:e1:6c:25:
eb:06:91:e8:c6:a9:74:53:4d:de:43:a3:cf:9a:17:b4:2c:bf:
2b:64:84:21:07:04:f0:7d:1d:56:bd:b2:63:db:16:c0:45:54:
f4:42:d8:04:51:5c:8d:5d:d5:cf:7a:e7:b0:05:ea:4c:50:f6:
0c:31:00:d6:30:12:9c:39:e4:9c:f1:1c:cd:d2:0e:5f:8e:ca:
c3:a6:dc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 15:52:42 2026 by rpki-client